Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2018-20336

Description

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. There is a stack-based buffer overflow issue in parse_req_queries function in wanduck.c via a long string over UDP, which may lead to an information leak.

POC

Reference

- https://starlabs.sg/advisories/18-20336/

Github

- https://github.com/JustPlay/pce-ac88_linuxdriver